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IN THE SPECIFICATION : 

Please amend the specification as follows. 

[0029] According to one embodiment of the present invention, when user 12 connects 

to control device 20 (e.g., by sending a network communication destined for 
network 18 from user device 14), control device 20 can retrieve a user profile for 
user 12 that governs the bandwidth allocations to user 12. In one embodiment 
of the present invention, control device 20 can receive the user profile for user 
12 from an authentication database 24 at an authentication system 22 based on 
a set of user credentials provided by user 12 (e.g., password, user id, biometric 
data, certificates and or other user provided or hardware credentials known in 
the art). In another embodiment of the present invention, the user profile for 
user 12 can be stored at control device 10 in, for example, a local authentication 
database. Example authentication technologies include LDAP, Remote 
Authentication Dialup Internet User Specification ("RADIUS"), Microsoft Active 
Directory Service, Tivoli Access Manager, and Cisco TACACS/TACACS+. 
Authentication can occur as described in United States Patent Application Serial 

No. [[ 1 110/683,317 , entitled "System and Method for Providing Access 

Control," filed October 10, 2003, to MacKinnon et al., which is hereby fully 
incorporated by reference herein (the "Access Control Application"). 


